2 eval 'exec perl -S $0 ${1+"$@"}'
3 if $running_under_some_shell;
5 ## Configure -- OpenSSL source tree configuration script
6 ## If editing this file, run this command before committing
7 ## make -f Makefile.org TABLE
13 use File::Spec::Functions;
15 # see INSTALL for instructions.
17 my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [experimental-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-dso] [no-krb5] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--test-sanity] [--config=FILE] os/compiler[:flags]\n";
21 # --config add the given configuration file, which will be read after
22 # any "Configurations*" files that are found in the same
23 # directory as this script.
24 # --openssldir install OpenSSL in OPENSSLDIR (Default: DIR/ssl if the
25 # --prefix option is given; /usr/local/ssl otherwise)
26 # --prefix prefix for the OpenSSL include, lib and bin directories
27 # (Default: the OPENSSLDIR directory)
29 # --install_prefix Additional prefix for package builders (empty by
30 # default). This needn't be set in advance, you can
31 # just as well use "make INSTALL_PREFIX=/whatever install".
33 # --with-krb5-dir Declare where Kerberos 5 lives. The libraries are expected
34 # to live in the subdirectory lib/ and the header files in
35 # include/. A value is required.
36 # --with-krb5-lib Declare where the Kerberos 5 libraries live. A value is
38 # (Default: KRB5_DIR/lib)
39 # --with-krb5-include Declare where the Kerberos 5 header files live. A
41 # (Default: KRB5_DIR/include)
42 # --with-krb5-flavor Declare what flavor of Kerberos 5 is used. Currently
43 # supported values are "MIT" and "Heimdal". A value is required.
45 # --test-sanity Make a number of sanity checks on the data in this file.
46 # This is a debugging tool for OpenSSL developers.
48 # --cross-compile-prefix Add specified prefix to binutils components.
50 # no-hw-xxx do not compile support for specific crypto hardware.
51 # Generic OpenSSL-style methods relating to this support
52 # are always compiled but return NULL if the hardware
53 # support isn't compiled.
54 # no-hw do not compile support for any crypto hardware.
55 # [no-]threads [don't] try to create a library that is suitable for
56 # multithreaded applications (default is "threads" if we
58 # [no-]shared [don't] try to create shared libraries when supported.
59 # no-asm do not use assembler
60 # no-dso do not compile in any native shared-library methods. This
61 # will ensure that all methods just return NULL.
62 # no-krb5 do not compile in any KRB5 library or code.
63 # [no-]zlib [don't] compile support for zlib compression.
64 # zlib-dynamic Like "zlib", but the zlib library is expected to be a shared
65 # library and will be loaded in run-time by the OpenSSL library.
66 # sctp include SCTP support
67 # 386 generate 80386 code
68 # no-sse2 disables IA-32 SSE2 code, above option implies no-sse2
69 # no-<cipher> build without specified algorithm (rsa, idea, rc5, ...)
70 # -<xxx> +<xxx> compiler options are passed through
72 # DEBUG_SAFESTACK use type-safe stacks to enforce type-safety on stack items
73 # provided to stack calls. Generates unique stack functions for
74 # each possible stack type.
75 # DES_PTR use pointer lookup vs arrays in the DES in crypto/des/des_locl.h
76 # DES_RISC1 use different DES_ENCRYPT macro that helps reduce register
77 # dependancies but needs to more registers, good for RISC CPU's
78 # DES_RISC2 A different RISC variant.
79 # DES_UNROLL unroll the inner DES loop, sometimes helps, somtimes hinders.
80 # DES_INT use 'int' instead of 'long' for DES_LONG in crypto/des/des.h
81 # This is used on the DEC Alpha where long is 8 bytes
83 # BN_LLONG use the type 'long long' in crypto/bn/bn.h
84 # MD2_CHAR use 'char' instead of 'int' for MD2_INT in crypto/md2/md2.h
85 # MD2_LONG use 'long' instead of 'int' for MD2_INT in crypto/md2/md2.h
86 # IDEA_SHORT use 'short' instead of 'int' for IDEA_INT in crypto/idea/idea.h
87 # IDEA_LONG use 'long' instead of 'int' for IDEA_INT in crypto/idea/idea.h
88 # RC2_SHORT use 'short' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
89 # RC2_LONG use 'long' instead of 'int' for RC2_INT in crypto/rc2/rc2.h
90 # RC4_CHAR use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
91 # RC4_LONG use 'long' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
92 # RC4_INDEX define RC4_INDEX in crypto/rc4/rc4_locl.h. This turns on
93 # array lookups instead of pointer use.
94 # RC4_CHUNK enables code that handles data aligned at long (natural CPU
96 # RC4_CHUNK_LL enables code that handles data aligned at long long boundary
97 # (intended for 64-bit CPUs running 32-bit OS).
98 # BF_PTR use 'pointer arithmatic' for Blowfish (unsafe on Alpha).
99 # BF_PTR2 intel specific version (generic version is more efficient).
101 # Following are set automatically by this script
103 # MD5_ASM use some extra md5 assember,
104 # SHA1_ASM use some extra sha1 assember, must define L_ENDIAN for x86
105 # RMD160_ASM use some extra ripemd160 assember,
106 # SHA256_ASM sha256_block is implemented in assembler
107 # SHA512_ASM sha512_block is implemented in assembler
108 # AES_ASM ASE_[en|de]crypt is implemented in assembler
110 # Minimum warning options... any contributions to OpenSSL should at least get
113 my $gcc_devteam_warn = "-Wall -pedantic -DPEDANTIC -Wno-long-long -Wsign-compare -Wmissing-prototypes -Wshadow -Wformat -Werror -DCRYPTO_MDEBUG_ALL -DCRYPTO_MDEBUG_ABORT -DREF_CHECK";
115 my $clang_disabled_warnings = "-Wno-language-extension-token -Wno-extended-offsetof -Wno-padded -Wno-shorten-64-to-32 -Wno-format-nonliteral -Wno-missing-noreturn -Wno-unused-parameter -Wno-sign-conversion -Wno-unreachable-code -Wno-conversion -Wno-documentation -Wno-missing-variable-declarations -Wno-cast-align -Wno-incompatible-pointer-types-discards-qualifiers -Wno-missing-variable-declarations -Wno-missing-field-initializers -Wno-unused-macros -Wno-disabled-macro-expansion -Wno-conditional-uninitialized -Wno-switch-enum";
117 my $strict_warnings = 0;
119 my $x86_gcc_des="DES_PTR DES_RISC1 DES_UNROLL";
121 # MD2_CHAR slags pentium pros
122 my $x86_gcc_opts="RC4_INDEX MD2_INT";
124 # MODIFY THESE PARAMETERS IF YOU ARE GOING TO USE THE 'util/speed.sh SCRIPT
125 # Don't worry about these normally
128 my $tflags="-fast -Xa";
130 my $tlib="-lnsl -lsocket";
131 #$bits1="SIXTEEN_BIT ";
132 #$bits2="THIRTY_TWO_BIT ";
133 my $bits1="THIRTY_TWO_BIT ";
134 my $bits2="SIXTY_FOUR_BIT ";
136 my $x86_asm="x86cpuid.o:bn-586.o co-586.o x86-mont.o x86-gf2m.o:ecp_nistz256.o ecp_nistz256-x86.o:des-586.o crypt586.o:aes-586.o vpaes-x86.o aesni-x86.o:bf-586.o:md5-586.o:sha1-586.o sha256-586.o sha512-586.o:cast-586.o:rc4-586.o:rmd-586.o:rc5-586.o:wp_block.o wp-mmx.o:cmll-x86.o:ghash-x86.o:e_padlock-x86.o";
138 my $x86_elf_asm="$x86_asm:elf";
140 my $x86_64_asm="x86_64cpuid.o:x86_64-gcc.o x86_64-mont.o x86_64-mont5.o x86_64-gf2m.o rsaz_exp.o rsaz-x86_64.o rsaz-avx2.o:ecp_nistz256.o ecp_nistz256-x86_64.o::aes-x86_64.o vpaes-x86_64.o bsaes-x86_64.o aesni-x86_64.o aesni-sha1-x86_64.o aesni-sha256-x86_64.o aesni-mb-x86_64.o::md5-x86_64.o:sha1-x86_64.o sha256-x86_64.o sha512-x86_64.o sha1-mb-x86_64.o sha256-mb-x86_64.o::rc4-x86_64.o rc4-md5-x86_64.o:::wp-x86_64.o:cmll-x86_64.o cmll_misc.o:ghash-x86_64.o aesni-gcm-x86_64.o:e_padlock-x86_64.o";
141 my $ia64_asm="ia64cpuid.o:bn-ia64.o ia64-mont.o:::aes_core.o aes_cbc.o aes-ia64.o::md5-ia64.o:sha1-ia64.o sha256-ia64.o sha512-ia64.o::rc4-ia64.o rc4_skey.o:::::ghash-ia64.o::void";
142 my $sparcv9_asm="sparcv9cap.o sparccpuid.o:bn-sparcv9.o sparcv9-mont.o sparcv9a-mont.o vis3-mont.o sparct4-mont.o sparcv9-gf2m.o::des_enc-sparc.o fcrypt_b.o dest4-sparcv9.o:aes_core.o aes_cbc.o aes-sparcv9.o aest4-sparcv9.o::md5-sparcv9.o:sha1-sparcv9.o sha256-sparcv9.o sha512-sparcv9.o::::::camellia.o cmll_misc.o cmll_cbc.o cmllt4-sparcv9.o:ghash-sparcv9.o::void";
143 my $sparcv8_asm=":sparcv8.o::des_enc-sparc.o fcrypt_b.o:::::::::::::void";
144 my $alpha_asm="alphacpuid.o:bn_asm.o alpha-mont.o::::::sha1-alpha.o:::::::ghash-alpha.o::void";
145 my $mips64_asm=":bn-mips.o mips-mont.o:::aes_cbc.o aes-mips.o:::sha1-mips.o sha256-mips.o sha512-mips.o::::::::";
146 my $mips32_asm=$mips64_asm; $mips32_asm =~ s/\s*sha512\-mips\.o//;
147 my $s390x_asm="s390xcap.o s390xcpuid.o:bn-s390x.o s390x-mont.o s390x-gf2m.o:::aes-s390x.o aes-ctr.o aes-xts.o:::sha1-s390x.o sha256-s390x.o sha512-s390x.o::rc4-s390x.o:::::ghash-s390x.o:";
148 my $armv4_asm="armcap.o armv4cpuid.o:bn_asm.o armv4-mont.o armv4-gf2m.o:ecp_nistz256.o ecp_nistz256-armv4.o::aes_cbc.o aes-armv4.o bsaes-armv7.o aesv8-armx.o:::sha1-armv4-large.o sha256-armv4.o sha512-armv4.o:::::::ghash-armv4.o ghashv8-armx.o::void";
149 my $aarch64_asm="armcap.o arm64cpuid.o mem_clr.o::::aes_core.o aes_cbc.o aesv8-armx.o:::sha1-armv8.o sha256-armv8.o sha512-armv8.o:::::::ghashv8-armx.o:";
150 my $parisc11_asm="pariscid.o:bn_asm.o parisc-mont.o:::aes_core.o aes_cbc.o aes-parisc.o:::sha1-parisc.o sha256-parisc.o sha512-parisc.o::rc4-parisc.o:::::ghash-parisc.o::32";
151 my $parisc20_asm="pariscid.o:pa-risc2W.o parisc-mont.o:::aes_core.o aes_cbc.o aes-parisc.o:::sha1-parisc.o sha256-parisc.o sha512-parisc.o::rc4-parisc.o:::::ghash-parisc.o::64";
152 my $ppc64_asm="ppccpuid.o ppccap.o:bn-ppc.o ppc-mont.o ppc64-mont.o:::aes_core.o aes_cbc.o aes-ppc.o vpaes-ppc.o aesp8-ppc.o:::sha1-ppc.o sha256-ppc.o sha512-ppc.o sha256p8-ppc.o sha512p8-ppc.o:::::::ghashp8-ppc.o:";
153 my $ppc32_asm=$ppc64_asm;
155 # As for $BSDthreads. Idea is to maintain "collective" set of flags,
156 # which would cover all BSD flavors. -pthread applies to them all,
157 # but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
158 # -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
159 # which has to be accompanied by explicit -D_THREAD_SAFE and
160 # sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
161 # seems to be sufficient?
162 my $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
165 # table of known configurations, read in from files
167 # The content of each entry can take one of two forms:
169 # - old style config-string, colon seperated fields with exactly the
170 # following structure.:
172 # $cc : $cflags : $unistd : $thread_cflag : $sys_id : $lflags : $bn_ops : $cpuid_obj : $bn_obj : $ec_obj : $des_obj : $aes_obj : $bf_obj : $md5_obj : $sha1_obj : $cast_obj : $rc4_obj : $rmd160_obj : $rc5_obj : $wp_obj : $cmll_obj : $modes_obj : $engines_obj : $perlasm_scheme : $dso_scheme : $shared_target : $shared_cflag : $shared_ldflag : $shared_extension : $ranlib : $arflags : $multilib
174 # We use the stringtohash function - defined below - to combine with the
175 # fields and form a proper hash table from the string.
177 # - direct transfer of old style config string to hash table, using the names
178 # of the fields as keys:
184 # thread_cflag => $thread_cflag,
188 # cpuid_obj => $cpuid_obj,
191 # des_obj => $des_obj,
192 # aes_obj => $aes_obj,
194 # md5_obj => $md5_obj,
195 # sha1_obj => $sha1_obj,
196 # cast_obj => $cast_obj,
197 # rc4_obj => $rc4_obj,
198 # rmd160_obj => $rmd160_obj,
199 # rc5_obj => $rc5_obj,
201 # cmll_obj => $cmll_obj,
202 # modes_obj => $modes_obj,
203 # engines_obj => $engines_obj,
204 # perlasm_scheme => $perlasm_scheme,
205 # dso_scheme => $dso_scheme,
206 # shared_target => $shared_target,
207 # shared_cflag => $shared_cflag,
208 # shared_ldflag => $shared_ldflag,
209 # shared_extension => $shared_extension,
211 # arflags => $arflags,
212 # multilib => $multilib
215 # - new style config hash table, which has additional attributes for debug
216 # and non-debug flags to be added to the common flags, for cflags and lflags:
221 # "debug-cflags" => $debug_cflags,
222 # "nodebug-cflags" => $nodebug_cflags,
224 # thread_cflag => $thread_cflag,
227 # "debug-lflags" => $debug_lflags,
228 # "nodebug-lflags" => $nodebug_lflags,
230 # cpuid_obj => $cpuid_obj,
233 # des_obj => $des_obj,
234 # aes_obj => $aes_obj,
236 # md5_obj => $md5_obj,
237 # sha1_obj => $sha1_obj,
238 # cast_obj => $cast_obj,
239 # rc4_obj => $rc4_obj,
240 # rmd160_obj => $rmd160_obj,
241 # rc5_obj => $rc5_obj,
243 # cmll_obj => $cmll_obj,
244 # modes_obj => $modes_obj,
245 # engines_obj => $engines_obj,
246 # dso_scheme => $dso_scheme,
247 # shared_target => $shared_target,
248 # shared_cflag => $shared_cflag,
249 # shared_ldflag => $shared_ldflag,
250 # shared_extension => $shared_extension,
252 # arflags => $arflags,
253 # multilib => $multilib
256 # The configuration reader will do what it can to translate everything into
257 # new style config hash tables, including merging $target and debug-$target
258 # if they are similar enough.
265 if (ref($in) eq "HASH") {
268 my @stringsequence = (
303 # return a ref to a hash, that's what the outer braces are for.
304 return { map { shift @stringsequence => $_ } split /:/, $in };
307 # Support function to look for and resolve template references.
308 # It uses breadcrumbs to check for circular template references.
310 # Note: Any configuration value is also a template.
311 sub lookup_templates {
312 my $tableref = shift;
314 my @breadcrumbs = @_;
316 if (grep { $_ eq $target } @breadcrumbs) {
317 die "Template loop! target backtrace:\n ",join("\n ",
322 foreach my $key (keys %{$tableref->{$target}}) {
323 my $value = $tableref->{$target}->{$key};
324 while ($value =~ /{{([-\w]+)}}/) {
325 lookup_templates($tableref, $1, $target, @breadcrumbs);
326 $value = $`.$tableref->{$1}->{$key}.$';
328 $tableref->{$target}->{$key} = $value;
333 # Read configuration target stanzas from a file, so that people can have
334 # local files with their own definitions
337 open(CONFFILE, "< $fname")
338 or die "Can't open configuration file '$fname'!\n";
341 my $content = <CONFFILE>;
347 # Make sure we have debug- targets first
350 my $a_nd = $a =~ m/^debug-/ ? $' :$a;
351 my $b_nd = $b =~ m/^debug-/ ? $' :$b;
354 if (($a_nd == $a) == ($b_nd == $b)) {
355 # they are both debug- or not, compare them as they are
357 } elsif ($a_nd != $a) {
358 # $a is debug-, make it lesser
361 # $b is debug-, make $a greater
368 if (ref($targets{$_}) ne "HASH") {
369 # Value is assumed to be a string. Split it up to
370 # become a hash table of parameters. Also, try to
371 # merge debug- variants with the non-debug target.
373 # Start with converting the value from a string to a
374 # standardised hash of fields. Using $tohash is safe,
375 # if the input is already a hash ref, it's just returned
377 $targets{$_} = stringtohash($targets{$_});
379 # If the current target is a debug target, there might
380 # be a corresponding non-debug target that we can merge
381 # with. If it isn't a debug- target, we've already done
382 # as much merging as we can and do not need to bother
383 # with that any more.
384 if ($_ =~ m/^debug-/) {
386 my $nondebugkey = $';
387 my $debug = $targets{$debugkey};
390 if ($targets{$nondebugkey}) {
391 $nondebug = stringtohash($targets{$nondebugkey});
395 # There's both a debug and non-debug variant of
396 # this target, so we should try to merge them
399 # First, check that the non-debug variant isn't
400 # already built up with all it should have.
401 if ($nondebug->{debug_cflags}
402 || $nondebug->{nodebug_cflags}
403 || $nondebug->{debug_lflags}
404 || $nondebug->{nodebug_lflags}) {
405 warn "there's a debug target $debugkey to be merged with a target $nondebugkey, but the latter seems to already have both nodebug and debug information. This requires human intervention. Skipping $debugkey...";
409 # Now, check similarity.
410 # For keys they have in common, support that
411 # cflags and lflags can differ, otherwise they
412 # must have exactly the same values for them
413 # to be merged into one.
414 my $similarenough = 1;
415 for (keys %{$debug}) {
416 if ($nondebug->{$_} ne $debug->{$_}
417 && $_ !~ m/^[cl]flags$/) {
423 if ($similarenough) {
424 # Here's where the magic happens, split the
425 # options in the debug and non-debug variants
426 # cflags and ldflags into three strings each,
427 # one with common flags, one with extra debug
428 # flags and one with extra non-debug flags.
430 # The result ends up in %h_nondebug, which
431 # becomes the merged variant when we're done.
432 # for each of cflags and lflags, they are
433 # replaced with cflags, debug_cflags,
434 # nodebug_cflags and similar for lflags.
436 # The purpose is that 'cflags' should be
437 # used together with 'debug_cflags' or
438 # 'nodebug_cflags' depending on what the
440 foreach (("cflags", "lflags")) {
441 my @list_d = split /\s+/, $debug->{$_};
442 my @list_nd = split /\s+/, $nondebug->{$_};
443 my %presence = (); # bitmap
444 # 1: present in @list_d
445 # 2: present in @list_nd
447 map { $presence{$_} += 1; } @list_d;
448 map { $presence{$_} += 2; } @list_nd;
450 delete $nondebug->{$_};
451 # Note: we build from the original lists to
452 # preserve order, it might be important
453 $nondebug->{"debug-".$_} =
455 grep { $presence{$_} == 1 } @list_d);
456 $nondebug->{"nodebug-".$_} =
458 grep { $presence{$_} == 2 } @list_nd);
461 grep { $presence{$_} == 3 } @list_d);
464 $targets{$nondebugkey} = $nondebug;
465 delete $targets{$debugkey};
472 %table = (%table, %targets);
474 # Go through all new targets and resolve template references.
475 foreach (keys %targets) {
476 lookup_templates(\%table, $_);
480 my ($vol, $dir, $dummy) = File::Spec->splitpath($0);
481 my $pattern = File::Spec->catpath($vol, $dir, "Configurations/*.conf");
482 foreach (sort glob($pattern) ) {
486 my @MK1MF_Builds=qw(VC-WIN64I VC-WIN64A
487 debug-VC-WIN64I debug-VC-WIN64A
488 VC-NT VC-CE VC-WIN32 debug-VC-WIN32
490 netware-clib netware-clib-bsdsock
491 netware-libc netware-libc-bsdsock);
497 my $install_prefix= "$ENV{'INSTALL_PREFIX'}";
498 my $cross_compile_prefix="";
499 my $fipslibdir="/usr/local/ssl/fips-2.0/lib/";
500 my $nofipscanistercheck=0;
501 my $baseaddr="0xFB00000";
504 my $no_shared=0; # but "no-shared" is default
505 my $zlib=1; # but "no-zlib" is default
506 my $no_krb5=0; # but "no-krb5" is implied unless "--with-krb5-..." is used
507 my $no_rfc3779=1; # but "no-rfc3779" is default
512 my $Makefile="Makefile";
513 my $des_locl="crypto/des/des_locl.h";
514 my $des ="crypto/des/des.h";
515 my $bn ="crypto/bn/bn.h";
516 my $md2 ="crypto/md2/md2.h";
517 my $rc4 ="crypto/rc4/rc4.h";
518 my $rc4_locl="crypto/rc4/rc4_locl.h";
519 my $idea ="crypto/idea/idea.h";
520 my $rc2 ="crypto/rc2/rc2.h";
521 my $bf ="crypto/bf/bf_locl.h";
522 my $bn_asm ="bn_asm.o";
523 my $des_enc="des_enc.o fcrypt_b.o";
524 my $aes_enc="aes_core.o aes_cbc.o";
525 my $bf_enc ="bf_enc.o";
526 my $cast_enc="c_enc.o";
527 my $rc4_enc="rc4_enc.o rc4_skey.o";
528 my $rc5_enc="rc5_enc.o";
529 my $cmll_enc="camellia.o cmll_misc.o cmll_cbc.o";
535 # All of the following is disabled by default (RC5 was enabled before 0.9.8):
537 my %disabled = ( # "what" => "comment" [or special keyword "experimental"]
538 "deprecated" => "default",
539 "ec_nistp_64_gcc_128" => "default",
541 "jpake" => "experimental",
544 "rfc3779" => "default",
546 "shared" => "default",
547 "ssl-trace" => "default",
548 "store" => "experimental",
549 "unit-test" => "default",
551 "zlib-dynamic" => "default"
553 my @experimental = ();
555 # This is what $depflags will look like with the above defaults
556 # (we need this to see if we should advise the user to run "make depend"):
557 my $default_depflags = " -DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_EC_NISTP_64_GCC_128 -DOPENSSL_NO_GMP -DOPENSSL_NO_JPAKE -DOPENSSL_NO_MD2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779 -DOPENSSL_NO_SCTP -DOPENSSL_NO_SSL_TRACE -DOPENSSL_NO_STORE -DOPENSSL_NO_UNIT_TEST";
559 # Explicit "no-..." options will be collected in %disabled along with the defaults.
560 # To remove something from %disabled, use "enable-foo" (unless it's experimental).
561 # For symmetry, "disable-foo" is a synonym for "no-foo".
563 # For features called "experimental" here, a more explicit "experimental-foo" is needed to enable.
564 # We will collect such requests in @experimental.
565 # To avoid accidental use of experimental features, applications will have to use -DOPENSSL_EXPERIMENTAL_FOO.
570 &usage if ($#ARGV < 0);
574 my $openssl_experimental_defines;
575 my $openssl_algorithm_defines;
576 my $openssl_thread_defines;
577 my $openssl_sys_defines="";
578 my $openssl_other_defines;
589 my $argv_unprocessed=1;
591 while($argv_unprocessed)
595 $openssl_experimental_defines="";
596 $openssl_algorithm_defines="";
597 $openssl_thread_defines="";
598 $openssl_sys_defines="";
599 $openssl_other_defines="";
606 $argvstring=join(' ',@argvcopy);
611 s /^-no-/no-/; # some people just can't read the instructions
613 # rewrite some options in "enable-..." form
614 s /^-?-?shared$/enable-shared/;
615 s /^sctp$/enable-sctp/;
616 s /^threads$/enable-threads/;
617 s /^zlib$/enable-zlib/;
618 s /^zlib-dynamic$/enable-zlib-dynamic/;
620 if (/^no-(.+)$/ || /^disable-(.+)$/)
622 if (!($disabled{$1} eq "experimental"))
626 $disabled{"ssl3"} = "option(ssl)";
630 $disabled{"tls1"} = "option(tls)"
632 elsif ($1 eq "ssl3-method")
634 $disabled{"ssl3-method"} = "option(ssl)";
635 $disabled{"ssl3"} = "option(ssl)";
639 $disabled{$1} = "option";
643 elsif (/^enable-(.+)$/ || /^experimental-(.+)$/)
646 if ($disabled{$algo} eq "experimental")
648 die "You are requesting an experimental feature; please say 'experimental-$algo' if you are sure\n"
649 unless (/^experimental-/);
650 push @experimental, $algo;
652 delete $disabled{$algo};
654 $threads = 1 if ($algo eq "threads");
656 elsif (/^--test-sanity$/)
658 exit(&test_sanity());
660 elsif (/^--strict-warnings/)
662 $strict_warnings = 1;
664 elsif (/^reconfigure/ || /^reconf/)
666 if (open(IN,"<$Makefile"))
671 if (/^CONFIGURE_ARGS=(.*)/)
674 @argvcopy=split(' ',$argvstring);
675 die "Incorrect data to reconfigure, please do a normal configuration\n"
676 if (grep(/^reconf/,@argvcopy));
677 print "Reconfiguring with: $argvstring\n";
685 die "Insufficient data to reconfigure, please do a normal configuration\n";
695 # No RSAref support any more since it's not needed.
696 # The check for the option is there so scripts aren't
699 elsif (/^nofipscanistercheck$/)
702 $nofipscanistercheck = 1;
706 if (/^--prefix=(.*)$/)
710 elsif (/^--libdir=(.*)$/)
714 elsif (/^--openssldir=(.*)$/)
718 elsif (/^--install.prefix=(.*)$/)
722 elsif (/^--with-krb5-(dir|lib|include|flavor)=(.*)$/)
724 $withargs{"krb5-".$1}=$2;
726 elsif (/^--with-zlib-lib=(.*)$/)
728 $withargs{"zlib-lib"}=$1;
730 elsif (/^--with-zlib-include=(.*)$/)
732 $withargs{"zlib-include"}="-I$1";
734 elsif (/^--with-fipslibdir=(.*)$/)
738 elsif (/^--with-baseaddr=(.*)$/)
742 elsif (/^--cross-compile-prefix=(.*)$/)
744 $cross_compile_prefix=$1;
746 elsif (/^--config=(.*)$/)
750 elsif (/^-[lL](.*)$/ or /^-Wl,/)
754 else # common if (/^[-+]/), just pass down...
756 $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
760 elsif ($_ =~ /^([^:]+):(.+)$/)
762 eval "\$table{\$1} = \"$2\""; # allow $xxx constructs in the string
767 die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
771 unless ($_ eq $target || /^no-/ || /^disable-/)
773 # "no-..." follows later after implied disactivations
774 # have been derived. (Don't take this too seroiusly,
775 # we really only write OPTIONS to the Makefile out of
781 { $options .= " ".$_; }
788 if ($processor eq "386")
790 $disabled{"sse2"} = "forced";
793 if (!defined($withargs{"krb5-flavor"}) || $withargs{"krb5-flavor"} eq "")
795 $disabled{"krb5"} = "krb5-flavor not specified";
798 if (!defined($disabled{"zlib-dynamic"}))
800 # "zlib-dynamic" was specifically enabled, so enable "zlib"
801 delete $disabled{"zlib"};
804 if (defined($disabled{"rijndael"}))
806 $disabled{"aes"} = "forced";
808 if (defined($disabled{"des"}))
810 $disabled{"mdc2"} = "forced";
812 if (defined($disabled{"ec"}))
814 $disabled{"ecdsa"} = "forced";
815 $disabled{"ecdh"} = "forced";
818 # SSL 3.0 and TLS requires MD5 and SHA and either RSA or DSA+DH
819 if (defined($disabled{"md5"}) || defined($disabled{"sha"})
820 || (defined($disabled{"rsa"})
821 && (defined($disabled{"dsa"}) || defined($disabled{"dh"}))))
823 $disabled{"ssl3"} = "forced";
824 $disabled{"tls1"} = "forced";
827 if (defined($disabled{"tls1"}))
829 $disabled{"tlsext"} = "forced";
832 if (defined($disabled{"ec"}) || defined($disabled{"dsa"})
833 || defined($disabled{"dh"}))
835 $disabled{"gost"} = "forced";
838 # SRP and HEARTBEATS require TLSEXT
839 if (defined($disabled{"tlsext"}))
841 $disabled{"srp"} = "forced";
842 $disabled{"heartbeats"} = "forced";
845 if ($target eq "TABLE") {
846 foreach $target (sort keys %table) {
847 print_table_entry($target, "TABLE");
852 if ($target eq "LIST") {
853 foreach (sort keys %table) {
860 if ($target eq "HASH") {
861 print "%table = (\n";
862 foreach (sort keys %table) {
863 print_table_entry($_, "HASH");
868 if ($target =~ m/^CygWin32(-.*)$/) {
869 $target = "Cygwin".$1;
872 print "Configuring for $target\n";
874 my ($d, $t) = $target =~ m/^(debug-)?(.*)$/;
875 my $debug_prefix = "nodebug-";
877 $debug_prefix = "debug-";
879 # If we do not find debug-foo in the table, the target is set to foo,
880 # but only if the foo target has a noon-empty debug-cflags or debug-lflags
882 if (!$table{$target} && ($table{$t}->{"debug-cflags"}
883 || $table{$t}->{"debug-lflags"})) {
888 &usage if (!defined($table{$target}));
892 delete $disabled{"shared"} if ($disabled{"shared"} eq "default");
895 foreach (sort (keys %disabled))
897 $options .= " no-$_";
899 printf " no-%-12s %-10s", $_, "[$disabled{$_}]";
909 elsif (/^static-engine$/)
911 elsif (/^zlib-dynamic$/)
920 ($ALGO = $algo = $_) =~ tr/[\-a-z]/[_A-Z]/;
922 if (/^asm$/ || /^err$/ || /^hw$/ || /^hw-/)
924 $openssl_other_defines .= "#define OPENSSL_NO_$ALGO\n";
925 print " OPENSSL_NO_$ALGO";
927 if (/^err$/) { $flags .= "-DOPENSSL_NO_ERR "; }
928 elsif (/^asm$/) { $no_asm = 1; }
932 ($ALGO,$algo) = ("RMD160","rmd160") if ($algo eq "ripemd");
934 $openssl_algorithm_defines .= "#define OPENSSL_NO_$ALGO\n";
935 print " OPENSSL_NO_$ALGO";
942 # fix-up crypto/directory name(s)
943 $skip[$#skip]="whrlpool" if $algo eq "whirlpool";
944 $skip[$#skip]="ripemd" if $algo eq "rmd160";
948 $depflags .= " -DOPENSSL_NO_$ALGO";
958 foreach (sort @experimental)
961 ($ALGO = $_) =~ tr/[a-z]/[A-Z]/;
963 # opensslconf.h will set OPENSSL_NO_... unless OPENSSL_EXPERIMENTAL_... is defined
964 $openssl_experimental_defines .= "#define OPENSSL_NO_$ALGO\n";
965 $exp_cflags .= " -DOPENSSL_EXPERIMENTAL_$ALGO";
968 my $IsMK1MF=scalar grep /^$target$/,@MK1MF_Builds;
970 $exe_ext=".exe" if ($target eq "Cygwin" || $target eq "DJGPP" || $target =~ /^mingw/);
971 $exe_ext=".nlm" if ($target =~ /netware/);
972 $exe_ext=".pm" if ($target =~ /vos/);
973 $openssldir="/usr/local/ssl" if ($openssldir eq "" and $prefix eq "");
974 $prefix=$openssldir if $prefix eq "";
976 $default_ranlib= &which("ranlib") or $default_ranlib="true";
977 $perl=$ENV{'PERL'} or $perl=&which("perl5") or $perl=&which("perl")
979 my $make = $ENV{'MAKE'} || "make";
981 $cross_compile_prefix=$ENV{'CROSS_COMPILE'} if $cross_compile_prefix eq "";
983 chop $openssldir if $openssldir =~ /\/$/;
984 chop $prefix if $prefix =~ /.\/$/;
986 $openssldir=$prefix . "/ssl" if $openssldir eq "";
987 $openssldir=$prefix . "/" . $openssldir if $openssldir !~ /(^\/|^[a-zA-Z]:[\\\/])/;
990 print "IsMK1MF=$IsMK1MF\n";
992 # Allow environment CC to override compiler...
993 my $cc = $ENV{CC} || $table{$t}->{cc};
995 # For cflags and lflags, add the debug- or nodebug- attributes
996 # Do it in such a way that no spurious space is appended (hence the grep).
997 my $cflags = join(" ",
998 grep { $_ } ($table{$t}->{cflags},
999 $table{$t}->{$debug_prefix."cflags"}));
1000 my $lflags = join(" ",
1001 grep { $_ } ($table{$t}->{lflags},
1002 $table{$t}->{$debug_prefix."lflags"}));
1004 my $unistd = $table{$t}->{unistd};
1005 my $thread_cflag = $table{$t}->{thread_cflag};
1006 my $sys_id = $table{$t}->{sys_id};
1007 my $bn_ops = $table{$t}->{bn_ops};
1008 my $cpuid_obj = $table{$t}->{cpuid_obj};
1009 my $bn_obj = $table{$t}->{bn_obj};
1010 my $ec_obj = $table{$t}->{ec_obj};
1011 my $des_obj = $table{$t}->{des_obj};
1012 my $aes_obj = $table{$t}->{aes_obj};
1013 my $bf_obj = $table{$t}->{bf_obj};
1014 my $md5_obj = $table{$t}->{md5_obj};
1015 my $sha1_obj = $table{$t}->{sha1_obj};
1016 my $cast_obj = $table{$t}->{cast_obj};
1017 my $rc4_obj = $table{$t}->{rc4_obj};
1018 my $rmd160_obj = $table{$t}->{rmd160_obj};
1019 my $rc5_obj = $table{$t}->{rc5_obj};
1020 my $wp_obj = $table{$t}->{wp_obj};
1021 my $cmll_obj = $table{$t}->{cmll_obj};
1022 my $modes_obj = $table{$t}->{modes_obj};
1023 my $engines_obj = $table{$t}->{engines_obj};
1024 my $perlasm_scheme = $table{$t}->{perlasm_scheme};
1025 my $dso_scheme = $table{$t}->{dso_scheme};
1026 my $shared_target = $table{$t}->{shared_target};
1027 my $shared_cflag = $table{$t}->{shared_cflag};
1028 my $shared_ldflag = $table{$t}->{shared_ldflag};
1029 my $shared_extension = $table{$t}->{shared_extension};
1030 my $ranlib = $ENV{'RANLIB'} || $table{$t}->{ranlib};
1031 my $ar = $ENV{'AR'} || "ar";
1032 my $arflags = $table{$t}->{arflags};
1033 my $multilib = $table{$t}->{multilib};
1035 # if $prefix/lib$multilib is not an existing directory, then
1036 # assume that it's not searched by linker automatically, in
1037 # which case adding $multilib suffix causes more grief than
1038 # we're ready to tolerate, so don't...
1039 $multilib="" if !-d "$prefix/lib$multilib";
1041 $libdir="lib$multilib" if $libdir eq "";
1043 $cflags = "$cflags$exp_cflags";
1045 # '%' in $lflags is used to split flags to "pre-" and post-flags
1046 my ($prelflags,$postlflags)=split('%',$lflags);
1047 if (defined($postlflags)) { $lflags=$postlflags; }
1048 else { $lflags=$prelflags; undef $prelflags; }
1050 if ($target =~ /^mingw/ && `$cc --target-help 2>&1` !~ m/\-mno\-cygwin/m)
1052 $cflags =~ s/\-mno\-cygwin\s*//;
1053 $shared_ldflag =~ s/\-mno\-cygwin\s*//;
1056 if ($target =~ /linux.*\-mips/ && !$no_asm && $flags !~ /\-m(ips|arch=)/) {
1057 # minimally required architecture flags for assembly modules
1058 $cflags="-mips2 $cflags" if ($target =~ /mips32/);
1059 $cflags="-mips3 $cflags" if ($target =~ /mips64/);
1062 my $no_shared_warn=0;
1063 my $no_user_cflags=0;
1065 if ($flags ne "") { $cflags="$flags$cflags"; }
1066 else { $no_user_cflags=1; }
1068 # Kerberos settings. The flavor must be provided from outside, either through
1069 # the script "config" or manually.
1072 my ($lresolv, $lpath, $lext);
1073 if ($withargs{"krb5-flavor"} =~ /^[Hh]eimdal$/)
1075 die "Sorry, Heimdal is currently not supported\n";
1077 ##### HACK to force use of Heimdal.
1078 ##### WARNING: Since we don't really have adequate support for Heimdal,
1079 ##### using this will break the build. You'll have to make
1080 ##### changes to the source, and if you do, please send
1081 ##### patches to openssl-dev@openssl.org
1082 if ($withargs{"krb5-flavor"} =~ /^force-[Hh]eimdal$/)
1084 warn "Heimdal isn't really supported. Your build WILL break\n";
1085 warn "If you fix the problems, please send a patch to openssl-dev\@openssl.org\n";
1086 $withargs{"krb5-dir"} = "/usr/heimdal"
1087 if $withargs{"krb5-dir"} eq "";
1088 $withargs{"krb5-lib"} = "-L".$withargs{"krb5-dir"}.
1089 "/lib -lgssapi -lkrb5 -lcom_err"
1090 if $withargs{"krb5-lib"} eq "" && !$IsMK1MF;
1091 $cflags="-DKRB5_HEIMDAL $cflags";
1093 if ($withargs{"krb5-flavor"} =~ /^[Mm][Ii][Tt]/)
1095 $withargs{"krb5-dir"} = "/usr/kerberos"
1096 if $withargs{"krb5-dir"} eq "";
1097 $withargs{"krb5-lib"} = "-L".$withargs{"krb5-dir"}.
1098 "/lib -lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto"
1099 if $withargs{"krb5-lib"} eq "" && !$IsMK1MF;
1100 $cflags="-DKRB5_MIT $cflags";
1101 $withargs{"krb5-flavor"} =~ s/^[Mm][Ii][Tt][._-]*//;
1102 if ($withargs{"krb5-flavor"} =~ /^1[._-]*[01]/)
1104 $cflags="-DKRB5_MIT_OLD11 $cflags";
1108 foreach $lpath ("/lib", "/usr/lib")
1110 foreach $lext ("a", "so")
1112 $lresolv = "$lpath/libresolv.$lext";
1113 last LRESOLV if (-r "$lresolv");
1117 $withargs{"krb5-lib"} .= " -lresolv"
1118 if ("$lresolv" ne "");
1119 $withargs{"krb5-include"} = "-I".$withargs{"krb5-dir"}."/include"
1120 if $withargs{"krb5-include"} eq "" &&
1121 $withargs{"krb5-dir"} ne "";
1124 # The DSO code currently always implements all functions so that no
1125 # applications will have to worry about that from a compilation point
1126 # of view. However, the "method"s may return zero unless that platform
1127 # has support compiled in for them. Currently each method is enabled
1128 # by a define "DSO_<name>" ... we translate the "dso_scheme" config
1129 # string entry into using the following logic;
1131 if (!$no_dso && $dso_scheme ne "")
1133 $dso_scheme =~ tr/[a-z]/[A-Z]/;
1134 if ($dso_scheme eq "DLFCN")
1136 $dso_cflags = "-DDSO_DLFCN -DHAVE_DLFCN_H";
1138 elsif ($dso_scheme eq "DLFCN_NO_H")
1140 $dso_cflags = "-DDSO_DLFCN";
1144 $dso_cflags = "-DDSO_$dso_scheme";
1146 $cflags = "$dso_cflags $cflags";
1151 if ($thread_cflag ne "(unknown)" && !$no_threads)
1153 # If we know how to do it, support threads by default.
1156 if ($thread_cflag eq "(unknown)" && $threads)
1158 # If the user asked for "threads", [s]he is also expected to
1159 # provide any system-dependent compiler options that are
1161 if ($no_user_cflags)
1163 print "You asked for multi-threading support, but didn't\n";
1164 print "provide any system-specific compiler options\n";
1167 $thread_cflags="-DOPENSSL_THREADS $cflags" ;
1168 $thread_defines .= "#define OPENSSL_THREADS\n";
1172 $thread_cflags="-DOPENSSL_THREADS $thread_cflag $cflags";
1173 $thread_defines .= "#define OPENSSL_THREADS\n";
1175 # foreach $def (split ' ',$thread_cflag)
1177 # if ($def =~ s/^-D// && $def !~ /^_/)
1179 # $thread_defines .= "#define $def\n";
1184 $lflags="$libs$lflags" if ($libs ne "");
1188 $cpuid_obj=$bn_obj=$ec_obj=
1189 $des_obj=$aes_obj=$bf_obj=$cast_obj=$rc4_obj=$rc5_obj=$cmll_obj=
1190 $modes_obj=$sha1_obj=$md5_obj=$rmd160_obj=$wp_obj=$engines_obj="";
1191 $cflags=~s/\-D[BL]_ENDIAN// if ($fips);
1192 $thread_cflags=~s/\-D[BL]_ENDIAN// if ($fips);
1194 elsif (defined($disabled{ec2m}))
1196 $bn_obj =~ s/\w+-gf2m.o//;
1201 $cast_obj=""; # CAST assembler is not PIC
1206 $cflags=$thread_cflags;
1207 $openssl_thread_defines .= $thread_defines;
1212 $cflags = "-DZLIB $cflags";
1213 if (defined($disabled{"zlib-dynamic"}))
1215 if (defined($withargs{"zlib-lib"}))
1217 $lflags = "$lflags -L" . $withargs{"zlib-lib"} . " -lz";
1221 $lflags = "$lflags -lz";
1226 $cflags = "-DZLIB_SHARED $cflags";
1230 #Build the library with OPENSSL_USE_DEPRECATED if deprecation is not disabled
1231 if(!defined($disabled{"deprecated"}))
1233 $cflags = "-DOPENSSL_USE_DEPRECATED $cflags";
1236 # You will find shlib_mark1 and shlib_mark2 explained in Makefile.org
1237 my $shared_mark = "";
1238 if ($shared_target eq "")
1240 $no_shared_warn = 1 if !$no_shared && !$fips;
1245 if ($shared_cflag ne "")
1247 $cflags = "$shared_cflag -DOPENSSL_PIC $cflags";
1253 # add {no-}static-engine to options to allow mkdef.pl to work without extra arguments
1256 $openssl_other_defines.="#define OPENSSL_NO_DYNAMIC_ENGINE\n";
1257 $options.=" static-engine";
1261 $openssl_other_defines.="#define OPENSSL_NO_STATIC_ENGINE\n";
1262 $options.=" no-static-engine";
1266 $cpuid_obj.=" uplink.o uplink-x86.o" if ($cflags =~ /\-DOPENSSL_USE_APPLINK/);
1271 if ($target =~ /\-icc$/) # Intel C compiler
1274 if (open(FD,"$cc -V 2>&1 |"))
1276 while(<FD>) { $iccver=$1 if (/Version ([0-9]+)\./); }
1281 $cflags=~s/\-KPIC/-fPIC/;
1282 # Eliminate unnecessary dependency from libirc.a. This is
1283 # essential for shared library support, as otherwise
1284 # apps/openssl can end up in endless loop upon startup...
1285 $cflags.=" -Dmemcpy=__builtin_memcpy -Dmemset=__builtin_memset";
1289 $lflags.=" -i-static";
1290 $lflags=~s/\-no_cpprt/-no-cpprt/;
1294 $lflags=~s/\-i\-static/-static-intel/;
1298 $cflags.=" -no-intel-extensions"; # disable Cilk
1299 $lflags=~s/\-no\-cpprt/-no-cxxlib/;
1303 # Unlike other OSes (like Solaris, Linux, Tru64, IRIX) BSD run-time
1304 # linkers (tested OpenBSD, NetBSD and FreeBSD) "demand" RPATH set on
1305 # .so objects. Apparently application RPATH is not global and does
1306 # not apply to .so linked with other .so. Problem manifests itself
1307 # when libssl.so fails to load libcrypto.so. One can argue that we
1308 # should engrave this into Makefile.shared rules or into BSD-* config
1309 # lines above. Meanwhile let's try to be cautious and pass -rpath to
1310 # linker only when --prefix is not /usr.
1311 if ($target =~ /^BSD\-/)
1313 $shared_ldflag.=" -Wl,-rpath,\$(LIBRPATH)" if ($prefix !~ m|^/usr[/]*$|);
1318 #$cflags="-DOPENSSL_SYS_$sys_id $cflags";
1319 $openssl_sys_defines="#define OPENSSL_SYS_$sys_id\n";
1324 $ranlib = $default_ranlib;
1327 #my ($bn1)=split(/\s+/,$bn_obj);
1328 #$bn1 = "" unless defined $bn1;
1329 #$bn1=$bn_asm unless ($bn1 =~ /\.o$/);
1332 $cpuid_obj="" if ($processor eq "386");
1334 $bn_obj = $bn_asm unless $bn_obj ne "";
1335 # bn-586 is the only one implementing bn_*_part_words
1336 $cflags.=" -DOPENSSL_BN_ASM_PART_WORDS" if ($bn_obj =~ /bn-586/);
1337 $cflags.=" -DOPENSSL_IA32_SSE2" if (!$no_sse2 && $bn_obj =~ /86/);
1339 $cflags.=" -DOPENSSL_BN_ASM_MONT" if ($bn_obj =~ /-mont/);
1340 $cflags.=" -DOPENSSL_BN_ASM_MONT5" if ($bn_obj =~ /-mont5/);
1341 $cflags.=" -DOPENSSL_BN_ASM_GF2m" if ($bn_obj =~ /-gf2m/);
1345 $openssl_other_defines.="#define OPENSSL_FIPS\n";
1348 $cpuid_obj="mem_clr.o" unless ($cpuid_obj =~ /\.o$/);
1349 $des_obj=$des_enc unless ($des_obj =~ /\.o$/);
1350 $bf_obj=$bf_enc unless ($bf_obj =~ /\.o$/);
1351 $cast_obj=$cast_enc unless ($cast_obj =~ /\.o$/);
1352 $rc4_obj=$rc4_enc unless ($rc4_obj =~ /\.o$/);
1353 $rc5_obj=$rc5_enc unless ($rc5_obj =~ /\.o$/);
1354 if ($sha1_obj =~ /\.o$/)
1356 # $sha1_obj=$sha1_enc;
1357 $cflags.=" -DSHA1_ASM" if ($sha1_obj =~ /sx86/ || $sha1_obj =~ /sha1/);
1358 $cflags.=" -DSHA256_ASM" if ($sha1_obj =~ /sha256/);
1359 $cflags.=" -DSHA512_ASM" if ($sha1_obj =~ /sha512/);
1360 if ($sha1_obj =~ /sse2/)
1362 { $sha1_obj =~ s/\S*sse2\S+//; }
1363 elsif ($cflags !~ /OPENSSL_IA32_SSE2/)
1364 { $cflags.=" -DOPENSSL_IA32_SSE2"; }
1367 if ($md5_obj =~ /\.o$/)
1369 # $md5_obj=$md5_enc;
1370 $cflags.=" -DMD5_ASM";
1372 if ($rmd160_obj =~ /\.o$/)
1374 # $rmd160_obj=$rmd160_enc;
1375 $cflags.=" -DRMD160_ASM";
1377 if ($aes_obj =~ /\.o$/)
1379 $cflags.=" -DAES_ASM" if ($aes_obj =~ m/\baes\-/);;
1380 # aes-ctr.o is not a real file, only indication that assembler
1381 # module implements AES_ctr32_encrypt...
1382 $cflags.=" -DAES_CTR_ASM" if ($aes_obj =~ s/\s*aes\-ctr\.o//);
1383 # aes-xts.o indicates presence of AES_xts_[en|de]crypt...
1384 $cflags.=" -DAES_XTS_ASM" if ($aes_obj =~ s/\s*aes\-xts\.o//);
1385 $aes_obj =~ s/\s*(vpaes|aesni)\-x86\.o//g if ($no_sse2);
1386 $cflags.=" -DVPAES_ASM" if ($aes_obj =~ m/vpaes/);
1387 $cflags.=" -DBSAES_ASM" if ($aes_obj =~ m/bsaes/);
1392 $wp_obj="" if ($wp_obj =~ /mmx/ && $processor eq "386");
1393 if ($wp_obj =~ /\.o$/ && !$disabled{"whirlpool"})
1395 $cflags.=" -DWHIRLPOOL_ASM";
1398 $wp_obj="wp_block.o";
1400 $cmll_obj=$cmll_enc unless ($cmll_obj =~ /.o$/);
1401 if ($modes_obj =~ /ghash\-/)
1403 $cflags.=" -DGHASH_ASM";
1405 if ($ec_obj =~ /ecp_nistz256/)
1407 $cflags.=" -DECP_NISTZ256_ASM";
1410 # "Stringify" the C flags string. This permits it to be made part of a string
1411 # and works as well on command lines.
1412 $cflags =~ s/([\\\"])/\\\1/g;
1414 my $version = "unknown";
1415 my $version_num = "unknown";
1416 my $major = "unknown";
1417 my $minor = "unknown";
1418 my $shlib_version_number = "unknown";
1419 my $shlib_version_history = "unknown";
1420 my $shlib_major = "unknown";
1421 my $shlib_minor = "unknown";
1423 open(IN,'<crypto/opensslv.h') || die "unable to read opensslv.h:$!\n";
1426 $version=$1 if /OPENSSL.VERSION.TEXT.*OpenSSL (\S+) /;
1427 $version_num=$1 if /OPENSSL.VERSION.NUMBER.*0x(\S+)/;
1428 $shlib_version_number=$1 if /SHLIB_VERSION_NUMBER *"([^"]+)"/;
1429 $shlib_version_history=$1 if /SHLIB_VERSION_HISTORY *"([^"]*)"/;
1432 if ($shlib_version_history ne "") { $shlib_version_history .= ":"; }
1434 if ($version =~ /(^[0-9]*)\.([0-9\.]*)/)
1440 if ($shlib_version_number =~ /(^[0-9]*)\.([0-9\.]*)/)
1446 if ($strict_warnings)
1449 die "ERROR --strict-warnings requires gcc or clang" unless ($cc =~ /gcc$/ or $cc =~ /clang$/);
1450 foreach $wopt (split /\s+/, $gcc_devteam_warn)
1452 $cflags .= " $wopt" unless ($cflags =~ /$wopt/)
1456 open(IN,"<Makefile.org") || die "unable to read Makefile.org:$!\n";
1457 unlink("$Makefile.new") || die "unable to remove old $Makefile.new:$!\n" if -e "$Makefile.new";
1458 open(OUT,">$Makefile.new") || die "unable to create $Makefile.new:$!\n";
1459 print OUT "### Generated automatically from Makefile.org by Configure.\n\n";
1465 $sdirs = 1 if /^SDIRS=/;
1468 foreach $dir (@skip) {
1473 $sdirs = 0 unless /\\$/;
1474 s/fips // if (/^DIRS=/ && !$fips);
1475 s/engines // if (/^DIRS=/ && $disabled{"engine"});
1476 s/ccgost// if (/^ENGDIRS=/ && $disabled{"gost"});
1477 s/^VERSION=.*/VERSION=$version/;
1478 s/^MAJOR=.*/MAJOR=$major/;
1479 s/^MINOR=.*/MINOR=$minor/;
1480 s/^SHLIB_VERSION_NUMBER=.*/SHLIB_VERSION_NUMBER=$shlib_version_number/;
1481 s/^SHLIB_VERSION_HISTORY=.*/SHLIB_VERSION_HISTORY=$shlib_version_history/;
1482 s/^SHLIB_MAJOR=.*/SHLIB_MAJOR=$shlib_major/;
1483 s/^SHLIB_MINOR=.*/SHLIB_MINOR=$shlib_minor/;
1484 s/^SHLIB_EXT=.*/SHLIB_EXT=$shared_extension/;
1485 s/^INSTALLTOP=.*$/INSTALLTOP=$prefix/;
1486 s/^MULTILIB=.*$/MULTILIB=$multilib/;
1487 s/^OPENSSLDIR=.*$/OPENSSLDIR=$openssldir/;
1488 s/^LIBDIR=.*$/LIBDIR=$libdir/;
1489 s/^INSTALL_PREFIX=.*$/INSTALL_PREFIX=$install_prefix/;
1490 s/^PLATFORM=.*$/PLATFORM=$target/;
1491 s/^OPTIONS=.*$/OPTIONS=$options/;
1492 s/^CONFIGURE_ARGS=.*$/CONFIGURE_ARGS=$argvstring/;
1493 if ($cross_compile_prefix)
1495 s/^CC=.*$/CROSS_COMPILE= $cross_compile_prefix\nCC= \$\(CROSS_COMPILE\)$cc/;
1496 s/^AR=\s*/AR= \$\(CROSS_COMPILE\)/;
1497 s/^NM=\s*/NM= \$\(CROSS_COMPILE\)/;
1498 s/^RANLIB=\s*/RANLIB= \$\(CROSS_COMPILE\)/;
1499 s/^MAKEDEPPROG=.*$/MAKEDEPPROG= \$\(CROSS_COMPILE\)$cc/ if $cc eq "gcc";
1503 s/^AR=\s*ar/AR= $ar/;
1504 s/^RANLIB=.*/RANLIB= $ranlib/;
1505 s/^MAKEDEPPROG=.*$/MAKEDEPPROG= $cc/ if $cc eq "gcc" || ($cc eq 'cc' && $target =~ /darwin/);
1507 s/^CFLAG=.*$/CFLAG= $cflags/;
1508 s/^DEPFLAG=.*$/DEPFLAG=$depflags/;
1509 s/^PEX_LIBS=.*$/PEX_LIBS= $prelflags/;
1510 s/^EX_LIBS=.*$/EX_LIBS= $lflags/;
1511 s/^EXE_EXT=.*$/EXE_EXT= $exe_ext/;
1512 s/^CPUID_OBJ=.*$/CPUID_OBJ= $cpuid_obj/;
1513 s/^BN_ASM=.*$/BN_ASM= $bn_obj/;
1514 s/^EC_ASM=.*$/EC_ASM= $ec_obj/;
1515 s/^DES_ENC=.*$/DES_ENC= $des_obj/;
1516 s/^AES_ENC=.*$/AES_ENC= $aes_obj/;
1517 s/^BF_ENC=.*$/BF_ENC= $bf_obj/;
1518 s/^CAST_ENC=.*$/CAST_ENC= $cast_obj/;
1519 s/^RC4_ENC=.*$/RC4_ENC= $rc4_obj/;
1520 s/^RC5_ENC=.*$/RC5_ENC= $rc5_obj/;
1521 s/^MD5_ASM_OBJ=.*$/MD5_ASM_OBJ= $md5_obj/;
1522 s/^SHA1_ASM_OBJ=.*$/SHA1_ASM_OBJ= $sha1_obj/;
1523 s/^RMD160_ASM_OBJ=.*$/RMD160_ASM_OBJ= $rmd160_obj/;
1524 s/^WP_ASM_OBJ=.*$/WP_ASM_OBJ= $wp_obj/;
1525 s/^CMLL_ENC=.*$/CMLL_ENC= $cmll_obj/;
1526 s/^MODES_ASM_OBJ.=*$/MODES_ASM_OBJ= $modes_obj/;
1527 s/^ENGINES_ASM_OBJ.=*$/ENGINES_ASM_OBJ= $engines_obj/;
1528 s/^PERLASM_SCHEME=.*$/PERLASM_SCHEME= $perlasm_scheme/;
1529 s/^PROCESSOR=.*/PROCESSOR= $processor/;
1530 s/^ARFLAGS=.*/ARFLAGS= $arflags/;
1531 s/^PERL=.*/PERL= $perl/;
1532 s/^KRB5_INCLUDES=.*/KRB5_INCLUDES=$withargs{"krb5-include"}/;
1533 s/^LIBKRB5=.*/LIBKRB5=$withargs{"krb5-lib"}/;
1534 s/^LIBZLIB=.*/LIBZLIB=$withargs{"zlib-lib"}/;
1535 s/^ZLIB_INCLUDE=.*/ZLIB_INCLUDE=$withargs{"zlib-include"}/;
1536 s/^FIPSLIBDIR=.*/FIPSLIBDIR=$fipslibdir/;
1537 s/^FIPSCANLIB=.*/FIPSCANLIB=libcrypto/ if $fips;
1538 s/^SHARED_FIPS=.*/SHARED_FIPS=/;
1539 s/^SHLIBDIRS=.*/SHLIBDIRS= crypto ssl/;
1540 s/^BASEADDR=.*/BASEADDR=$baseaddr/;
1541 s/^SHLIB_TARGET=.*/SHLIB_TARGET=$shared_target/;
1542 s/^SHLIB_MARK=.*/SHLIB_MARK=$shared_mark/;
1543 s/^SHARED_LIBS=.*/SHARED_LIBS=\$(SHARED_CRYPTO) \$(SHARED_SSL)/ if (!$no_shared);
1544 if ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*$/)
1547 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp/;
1549 elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.dylib$/)
1551 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.dylib/;
1553 elsif ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*\.[^\.]*$/)
1556 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_MAJOR) .s$sotmp/;
1558 elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.[^\.]*\.dylib$/)
1560 s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.\$(SHLIB_MAJOR).dylib .dylib/;
1562 s/^SHARED_LDFLAGS=.*/SHARED_LDFLAGS=$shared_ldflag/;
1567 rename($Makefile,"$Makefile.bak") || die "unable to rename $Makefile\n" if -e $Makefile;
1568 rename("$Makefile.new",$Makefile) || die "unable to rename $Makefile.new\n";
1571 print "CFLAG =$cflags\n";
1572 print "EX_LIBS =$lflags\n";
1573 print "CPUID_OBJ =$cpuid_obj\n";
1574 print "BN_ASM =$bn_obj\n";
1575 print "EC_ASM =$ec_obj\n";
1576 print "DES_ENC =$des_obj\n";
1577 print "AES_ENC =$aes_obj\n";
1578 print "BF_ENC =$bf_obj\n";
1579 print "CAST_ENC =$cast_obj\n";
1580 print "RC4_ENC =$rc4_obj\n";
1581 print "RC5_ENC =$rc5_obj\n";
1582 print "MD5_OBJ_ASM =$md5_obj\n";
1583 print "SHA1_OBJ_ASM =$sha1_obj\n";
1584 print "RMD160_OBJ_ASM=$rmd160_obj\n";
1585 print "CMLL_ENC =$cmll_obj\n";
1586 print "MODES_OBJ =$modes_obj\n";
1587 print "ENGINES_OBJ =$engines_obj\n";
1588 print "PROCESSOR =$processor\n";
1589 print "RANLIB =$ranlib\n";
1590 print "ARFLAGS =$arflags\n";
1591 print "PERL =$perl\n";
1592 print "KRB5_INCLUDES =",$withargs{"krb5-include"},"\n"
1593 if $withargs{"krb5-include"} ne "";
1601 my $rc4_int=$def_int;
1602 my $md2_int=$def_int;
1603 my $idea_int=$def_int;
1604 my $rc2_int=$def_int;
1608 my @type=("char","short","int","long");
1609 my ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0);
1610 my $export_var_as_fn=0;
1614 foreach (sort split(/\s+/,$bn_ops))
1616 $des_ptr=1 if /DES_PTR/;
1617 $des_risc1=1 if /DES_RISC1/;
1618 $des_risc2=1 if /DES_RISC2/;
1619 $des_unroll=1 if /DES_UNROLL/;
1620 $des_int=1 if /DES_INT/;
1621 $bn_ll=1 if /BN_LLONG/;
1622 $rc4_int=0 if /RC4_CHAR/;
1623 $rc4_int=3 if /RC4_LONG/;
1624 $rc4_idx=1 if /RC4_INDEX/;
1625 $rc4_chunk=1 if /RC4_CHUNK/;
1626 $rc4_chunk=2 if /RC4_CHUNK_LL/;
1627 $md2_int=0 if /MD2_CHAR/;
1628 $md2_int=3 if /MD2_LONG/;
1629 $idea_int=1 if /IDEA_SHORT/;
1630 $idea_int=3 if /IDEA_LONG/;
1631 $rc2_int=1 if /RC2_SHORT/;
1632 $rc2_int=3 if /RC2_LONG/;
1633 $bf_ptr=1 if $_ eq "BF_PTR";
1634 $bf_ptr=2 if $_ eq "BF_PTR2";
1635 ($b64l,$b64,$b32,$b16,$b8)=(0,1,0,0,0) if /SIXTY_FOUR_BIT/;
1636 ($b64l,$b64,$b32,$b16,$b8)=(1,0,0,0,0) if /SIXTY_FOUR_BIT_LONG/;
1637 ($b64l,$b64,$b32,$b16,$b8)=(0,0,1,0,0) if /THIRTY_TWO_BIT/;
1638 ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,1,0) if /SIXTEEN_BIT/;
1639 ($b64l,$b64,$b32,$b16,$b8)=(0,0,0,0,1) if /EIGHT_BIT/;
1640 $export_var_as_fn=1 if /EXPORT_VAR_AS_FN/;
1643 open(IN,'<crypto/opensslconf.h.in') || die "unable to read crypto/opensslconf.h.in:$!\n";
1644 unlink("crypto/opensslconf.h.new") || die "unable to remove old crypto/opensslconf.h.new:$!\n" if -e "crypto/opensslconf.h.new";
1645 open(OUT,'>crypto/opensslconf.h.new') || die "unable to create crypto/opensslconf.h.new:$!\n";
1646 print OUT "/* opensslconf.h */\n";
1647 print OUT "/* WARNING: Generated automatically from opensslconf.h.in by Configure. */\n\n";
1649 print OUT "#ifdef __cplusplus\n";
1650 print OUT "extern \"C\" {\n";
1651 print OUT "#endif\n";
1652 print OUT "/* OpenSSL was configured with the following options: */\n";
1653 my $openssl_algorithm_defines_trans = $openssl_algorithm_defines;
1654 $openssl_experimental_defines =~ s/^\s*#\s*define\s+OPENSSL_NO_(.*)/#ifndef OPENSSL_EXPERIMENTAL_$1\n# ifndef OPENSSL_NO_$1\n# define OPENSSL_NO_$1\n# endif\n#endif/mg;
1655 $openssl_algorithm_defines_trans =~ s/^\s*#\s*define\s+OPENSSL_(.*)/# if defined(OPENSSL_$1) \&\& !defined($1)\n# define $1\n# endif/mg;
1656 $openssl_algorithm_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1657 $openssl_algorithm_defines = " /* no ciphers excluded */\n" if $openssl_algorithm_defines eq "";
1658 $openssl_thread_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1659 $openssl_sys_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1660 $openssl_other_defines =~ s/^\s*#\s*define\s+(.*)/#ifndef $1\n# define $1\n#endif/mg;
1661 print OUT $openssl_sys_defines;
1662 print OUT "#ifndef OPENSSL_DOING_MAKEDEPEND\n\n";
1663 print OUT $openssl_experimental_defines;
1665 print OUT $openssl_algorithm_defines;
1666 print OUT "\n#endif /* OPENSSL_DOING_MAKEDEPEND */\n\n";
1667 print OUT $openssl_thread_defines;
1668 print OUT $openssl_other_defines,"\n";
1670 print OUT "/* The OPENSSL_NO_* macros are also defined as NO_* if the application\n";
1671 print OUT " asks for it. This is a transient feature that is provided for those\n";
1672 print OUT " who haven't had the time to do the appropriate changes in their\n";
1673 print OUT " applications. */\n";
1674 print OUT "#ifdef OPENSSL_ALGORITHM_DEFINES\n";
1675 print OUT $openssl_algorithm_defines_trans;
1676 print OUT "#endif\n\n";
1678 print OUT "#define OPENSSL_CPUID_OBJ\n\n" if ($cpuid_obj ne "mem_clr.o");
1682 if (/^#define\s+OPENSSLDIR/)
1684 my $foo = $openssldir;
1685 $foo =~ s/\\/\\\\/g;
1686 print OUT "#define OPENSSLDIR \"$foo\"\n";
1688 elsif (/^#define\s+ENGINESDIR/)
1690 my $foo = "$prefix/$libdir/engines";
1691 $foo =~ s/\\/\\\\/g;
1692 print OUT "#define ENGINESDIR \"$foo\"\n";
1694 elsif (/^#((define)|(undef))\s+OPENSSL_EXPORT_VAR_AS_FUNCTION/)
1695 { printf OUT "#undef OPENSSL_EXPORT_VAR_AS_FUNCTION\n"
1696 if $export_var_as_fn;
1697 printf OUT "#%s OPENSSL_EXPORT_VAR_AS_FUNCTION\n",
1698 ($export_var_as_fn)?"define":"undef"; }
1699 elsif (/^#define\s+OPENSSL_UNISTD/)
1701 $unistd = "<unistd.h>" if $unistd eq "";
1702 print OUT "#define OPENSSL_UNISTD $unistd\n";
1704 elsif (/^#((define)|(undef))\s+SIXTY_FOUR_BIT_LONG/)
1705 { printf OUT "#%s SIXTY_FOUR_BIT_LONG\n",($b64l)?"define":"undef"; }
1706 elsif (/^#((define)|(undef))\s+SIXTY_FOUR_BIT/)
1707 { printf OUT "#%s SIXTY_FOUR_BIT\n",($b64)?"define":"undef"; }
1708 elsif (/^#((define)|(undef))\s+THIRTY_TWO_BIT/)
1709 { printf OUT "#%s THIRTY_TWO_BIT\n",($b32)?"define":"undef"; }
1710 elsif (/^#((define)|(undef))\s+SIXTEEN_BIT/)
1711 { printf OUT "#%s SIXTEEN_BIT\n",($b16)?"define":"undef"; }
1712 elsif (/^#((define)|(undef))\s+EIGHT_BIT/)
1713 { printf OUT "#%s EIGHT_BIT\n",($b8)?"define":"undef"; }
1714 elsif (/^#((define)|(undef))\s+BN_LLONG\s*$/)
1715 { printf OUT "#%s BN_LLONG\n",($bn_ll)?"define":"undef"; }
1716 elsif (/^\#define\s+DES_LONG\s+.*/)
1717 { printf OUT "#define DES_LONG unsigned %s\n",
1718 ($des_int)?'int':'long'; }
1719 elsif (/^\#(define|undef)\s+DES_PTR/)
1720 { printf OUT "#%s DES_PTR\n",($des_ptr)?'define':'undef'; }
1721 elsif (/^\#(define|undef)\s+DES_RISC1/)
1722 { printf OUT "#%s DES_RISC1\n",($des_risc1)?'define':'undef'; }
1723 elsif (/^\#(define|undef)\s+DES_RISC2/)
1724 { printf OUT "#%s DES_RISC2\n",($des_risc2)?'define':'undef'; }
1725 elsif (/^\#(define|undef)\s+DES_UNROLL/)
1726 { printf OUT "#%s DES_UNROLL\n",($des_unroll)?'define':'undef'; }
1727 elsif (/^#define\s+RC4_INT\s/)
1728 { printf OUT "#define RC4_INT unsigned %s\n",$type[$rc4_int]; }
1729 elsif (/^#undef\s+RC4_CHUNK/)
1731 printf OUT "#undef RC4_CHUNK\n" if $rc4_chunk==0;
1732 printf OUT "#define RC4_CHUNK unsigned long\n" if $rc4_chunk==1;
1733 printf OUT "#define RC4_CHUNK unsigned long long\n" if $rc4_chunk==2;
1735 elsif (/^#((define)|(undef))\s+RC4_INDEX/)
1736 { printf OUT "#%s RC4_INDEX\n",($rc4_idx)?"define":"undef"; }
1737 elsif (/^#(define|undef)\s+I386_ONLY/)
1738 { printf OUT "#%s I386_ONLY\n", ($processor eq "386")?
1740 elsif (/^#define\s+MD2_INT\s/)
1741 { printf OUT "#define MD2_INT unsigned %s\n",$type[$md2_int]; }
1742 elsif (/^#define\s+IDEA_INT\s/)
1743 {printf OUT "#define IDEA_INT unsigned %s\n",$type[$idea_int];}
1744 elsif (/^#define\s+RC2_INT\s/)
1745 {printf OUT "#define RC2_INT unsigned %s\n",$type[$rc2_int];}
1746 elsif (/^#(define|undef)\s+BF_PTR/)
1748 printf OUT "#undef BF_PTR\n" if $bf_ptr == 0;
1749 printf OUT "#define BF_PTR\n" if $bf_ptr == 1;
1750 printf OUT "#define BF_PTR2\n" if $bf_ptr == 2;
1756 print OUT "#ifdef __cplusplus\n";
1758 print OUT "#endif\n";
1760 rename("crypto/opensslconf.h","crypto/opensslconf.h.bak") || die "unable to rename crypto/opensslconf.h\n" if -e "crypto/opensslconf.h";
1761 rename("crypto/opensslconf.h.new","crypto/opensslconf.h") || die "unable to rename crypto/opensslconf.h.new\n";
1766 print "SIXTY_FOUR_BIT_LONG mode\n" if $b64l;
1767 print "SIXTY_FOUR_BIT mode\n" if $b64;
1768 print "THIRTY_TWO_BIT mode\n" if $b32;
1769 print "SIXTEEN_BIT mode\n" if $b16;
1770 print "EIGHT_BIT mode\n" if $b8;
1771 print "DES_PTR used\n" if $des_ptr;
1772 print "DES_RISC1 used\n" if $des_risc1;
1773 print "DES_RISC2 used\n" if $des_risc2;
1774 print "DES_UNROLL used\n" if $des_unroll;
1775 print "DES_INT used\n" if $des_int;
1776 print "BN_LLONG mode\n" if $bn_ll;
1777 print "RC4 uses u$type[$rc4_int]\n" if $rc4_int != $def_int;
1778 print "RC4_INDEX mode\n" if $rc4_idx;
1779 print "RC4_CHUNK is undefined\n" if $rc4_chunk==0;
1780 print "RC4_CHUNK is unsigned long\n" if $rc4_chunk==1;
1781 print "RC4_CHUNK is unsigned long long\n" if $rc4_chunk==2;
1782 print "MD2 uses u$type[$md2_int]\n" if $md2_int != $def_int;
1783 print "IDEA uses u$type[$idea_int]\n" if $idea_int != $def_int;
1784 print "RC2 uses u$type[$rc2_int]\n" if $rc2_int != $def_int;
1785 print "BF_PTR used\n" if $bf_ptr == 1;
1786 print "BF_PTR2 used\n" if $bf_ptr == 2;
1789 open (OUT,">crypto/buildinf.h") || die "Can't open buildinf.h";
1792 /* auto-generated by Configure for crypto/cversion.c:
1793 * for Unix builds, crypto/Makefile.ssl generates functional definitions;
1794 * Windows builds (and other mk1mf builds) compile cversion.c with
1795 * -DMK1MF_BUILD and use definitions added to this file by util/mk1mf.pl. */
1796 #error "Windows builds (PLATFORM=$target) use mk1mf.pl-created Makefiles"
1801 my $make_command = "$make PERL=\'$perl\'";
1802 my $make_targets = "";
1803 $make_targets .= " links" if $symlink;
1804 $make_targets .= " depend" if $depflags ne $default_depflags && $make_depend;
1805 $make_targets .= " gentests" if $symlink;
1806 (system $make_command.$make_targets) == 0 or die "make $make_targets failed"
1807 if $make_targets ne "";
1808 if ( $perl =~ m@^/@) {
1809 &dofile("tools/c_rehash",$perl,'^#!/', '#!%s','^my \$dir;$', 'my $dir = "' . $openssldir . '";', '^my \$prefix;$', 'my $prefix = "' . $prefix . '";');
1810 &dofile("apps/CA.pl",$perl,'^#!/', '#!%s');
1812 # No path for Perl known ...
1813 &dofile("tools/c_rehash",'/usr/local/bin/perl','^#!/', '#!%s','^my \$dir;$', 'my $dir = "' . $openssldir . '";', '^my \$prefix;$', 'my $prefix = "' . $prefix . '";');
1814 &dofile("apps/CA.pl",'/usr/local/bin/perl','^#!/', '#!%s');
1816 if ($depflags ne $default_depflags && !$make_depend) {
1819 Since you've disabled or enabled at least one algorithm, you need to do
1820 the following before building:
1827 # create the ms/version32.rc file if needed
1828 if ($IsMK1MF && ($target !~ /^netware/)) {
1829 my ($v1, $v2, $v3, $v4);
1830 if ($version_num =~ /(^[0-9a-f]{1})([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})/i) {
1836 open (OUT,">ms/version32.rc") || die "Can't open ms/version32.rc";
1843 FILEVERSION $v1,$v2,$v3,$v4
1844 PRODUCTVERSION $v1,$v2,$v3,$v4
1851 FILEOS VOS__WINDOWS32
1855 BLOCK "StringFileInfo"
1860 VALUE "CompanyName", "The OpenSSL Project, http://www.openssl.org/\\0"
1861 VALUE "FileDescription", "OpenSSL Shared Library\\0"
1862 VALUE "FileVersion", "$version\\0"
1864 VALUE "InternalName", "libeay32\\0"
1865 VALUE "OriginalFilename", "libeay32.dll\\0"
1867 VALUE "InternalName", "ssleay32\\0"
1868 VALUE "OriginalFilename", "ssleay32.dll\\0"
1870 VALUE "ProductName", "The OpenSSL Toolkit\\0"
1871 VALUE "ProductVersion", "$version\\0"
1873 //VALUE "Comments", "\\0"
1874 VALUE "LegalCopyright", "Copyright © 1998-2005 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.\\0"
1875 //VALUE "LegalTrademarks", "\\0"
1876 //VALUE "PrivateBuild", "\\0"
1877 //VALUE "SpecialBuild", "\\0"
1882 VALUE "Translation", 0x409, 0x4b0
1891 Configured for $target.
1894 print <<\EOF if (!$no_threads && !$threads);
1896 The library could not be configured for supporting multi-threaded
1897 applications as the compiler options required on this system are not known.
1898 See file INSTALL for details if you need multi-threading.
1901 print <<\EOF if ($no_shared_warn);
1903 You gave the option 'shared'. Normally, that would give you shared libraries.
1904 Unfortunately, the OpenSSL configuration doesn't include shared library support
1905 for this platform yet, so it will pretend you gave the option 'no-shared'. If
1906 you can inform the developpers (openssl-dev\@openssl.org) how to support shared
1907 libraries on this platform, they will at least look at it and try their best
1908 (but please first make sure you have tried with a current version of OpenSSL).
1915 print STDERR $usage;
1916 print STDERR "\npick os/compiler from:\n";
1920 foreach $i (sort keys %table)
1922 next if $i =~ /^debug/;
1923 $k += length($i) + 1;
1929 print STDERR $i . " ";
1931 foreach $i (sort keys %table)
1933 next if $i !~ /^debug/;
1934 $k += length($i) + 1;
1940 print STDERR $i . " ";
1942 print STDERR "\n\nNOTE: If in doubt, on Unix-ish systems use './config'.\n";
1950 foreach $path (split /:/, $ENV{PATH})
1952 if (-f "$path/$name$exe_ext" and -x _)
1954 return "$path/$name$exe_ext" unless ($name eq "perl" and
1955 system("$path/$name$exe_ext -e " . '\'exit($]<5.0);\''));
1962 my $f; my $p; my %m; my @a; my $k; my $ff;
1965 open(IN,"<$f.in") || open(IN,"<$f") || die "unable to open $f:$!\n";
1968 foreach $k (keys %m)
1970 grep(/$k/ && ($_=sprintf($m{$k}."\n",$p)),@a);
1972 open(OUT,">$f.new") || die "unable to open $f.new:$!\n";
1975 rename($f,"$f.bak") || die "unable to rename $f\n" if -e $f;
1976 rename("$f.new",$f) || die "unable to rename $f.new\n";
1979 sub print_table_entry
1984 my $debug_cflags = "debug-cflags";
1985 my $nodebug_cflags = "nodebug-cflags";
1986 my $debug_lflags = "debug-lflags";
1987 my $nodebug_lflags = "nodebug-lflags";
1989 if ($type eq "TABLE") {
1993 \$cc = $table{$target}->{cc}
1994 \$cflags = $table{$target}->{cflags}
1995 \$debug_cflags = $table{$target}->{$debug_cflags}
1996 \$nodebug_cflags = $table{$target}->{$nodebug_cflags}
1997 \$unistd = $table{$target}->{unistd}
1998 \$thread_cflag = $table{$target}->{thread_cflag}
1999 \$sys_id = $table{$target}->{sys_id}
2000 \$lflags = $table{$target}->{lflags}
2001 \$debug_lflags = $table{$target}->{$debug_lflags}
2002 \$nodebug_lflags = $table{$target}->{$nodebug_lflags}
2003 \$bn_ops = $table{$target}->{bn_ops}
2004 \$cpuid_obj = $table{$target}->{cpuid_obj}
2005 \$bn_obj = $table{$target}->{bn_obj}
2006 \$ec_obj = $table{$target}->{ec_obj}
2007 \$des_obj = $table{$target}->{des_obj}
2008 \$aes_obj = $table{$target}->{aes_obj}
2009 \$bf_obj = $table{$target}->{bf_obj}
2010 \$md5_obj = $table{$target}->{md5_obj}
2011 \$sha1_obj = $table{$target}->{sha1_obj}
2012 \$cast_obj = $table{$target}->{cast_obj}
2013 \$rc4_obj = $table{$target}->{rc4_obj}
2014 \$rmd160_obj = $table{$target}->{rmd160_obj}
2015 \$rc5_obj = $table{$target}->{rc5_obj}
2016 \$wp_obj = $table{$target}->{wp_obj}
2017 \$cmll_obj = $table{$target}->{cmll_obj}
2018 \$modes_obj = $table{$target}->{modes_obj}
2019 \$engines_obj = $table{$target}->{engines_obj}
2020 \$perlasm_scheme = $table{$target}->{perlasm_scheme}
2021 \$dso_scheme = $table{$target}->{dso_scheme}
2022 \$shared_target= $table{$target}->{shared_target}
2023 \$shared_cflag = $table{$target}->{shared_cflag}
2024 \$shared_ldflag = $table{$target}->{shared_ldflag}
2025 \$shared_extension = $table{$target}->{shared_extension}
2026 \$ranlib = $table{$target}->{ranlib}
2027 \$arflags = $table{$target}->{arflags}
2028 \$multilib = $table{$target}->{multilib}
2030 } elsif ($type eq "HASH") {
2070 length((sort { length($a) <=> length($b) } @sequence)[-1]);
2071 print " '$target' => {\n";
2072 foreach (@sequence) {
2073 if ($table{$target}->{$_}) {
2074 print " '",$_,"'"," " x ($largest - length($_))," => '",$table{$target}->{$_},"',\n";
2085 print STDERR "=" x 70, "\n";
2086 print STDERR "=== SANITY TESTING!\n";
2087 print STDERR "=== No configuration will be done, all other arguments will be ignored!\n";
2088 print STDERR "=" x 70, "\n";
2090 foreach $target (sort keys %table)
2092 my $pre_dso_scheme = "perlasm_scheme";
2093 my $dso_scheme = "dso_scheme";
2094 my $post_dso_scheme = "shared_target";
2097 if ($table{$target}->{$pre_dso_scheme} =~ /^(beos|dl|dlfcn|win32|vms)$/)
2100 print STDERR "SANITY ERROR: '$target' has the dso_scheme values\n";
2101 print STDERR " in the previous field\n";
2103 elsif ($table{$target}->{$post_dso_scheme} =~ /^(beos|dl|dlfcn|win32|vms)$/)
2106 print STDERR "SANITY ERROR: '$target' has the dso_scheme values\n";
2107 print STDERR " in the following field\n";
2109 elsif ($table{$target}->{$dso_scheme} !~ /^(beos|dl|dlfcn|win32|vms|)$/)
2112 print STDERR "SANITY ERROR: '$target' has the dso_scheme field = ",$table{$target}->{$dso_scheme},"\n";
2113 print STDERR " valid values are 'beos', 'dl', 'dlfcn', 'win32' and 'vms'\n";
2116 print STDERR "No sanity errors detected!\n" if $errorcnt == 0;